Snort IDMEF is an IDMEF XML plugin for Snort to output alert events in the form of IDMEF messages. The plugin is compatible with Snort 2.xSnort is one of the best Open Source Network Intrusion Detection Systems available today.
Be the first to post a text review of Snort IDMEF Plugin. Rate and review a project by clicking thumbs up or thumbs down in the right column.
*2009-02-18 Sandro Poppi v2.0.0beta3 - spo_idmef.c -- fixed additionalDataPayload() creation of newAdditionalData -- fixed BuildRuleMessageTree() creation of newAdditionalData -- removed SPADE support since it is no longer integrated in Snort -- removed homenet from IDMEFData in favour of using pv.homenet -- removed IpAddrSet requirement due to using pv.homenet -- make more use of predefined Snort functions like PacketIs...() - spp_sfportscan.c -- adjusted for newer version - adjusted for Snort 2.8.3.2
I'm happy to announce a new release of the GPL'ed Snort IDMEF plugin 2.0.0beta3 for Snort as a patch against v2.8.3.2. IDMEF is the Intrusion Detection Exchange Message Format which is XML based and developed by the IETF working group IDWG. It's status is "Experimental RFC". Snort IDMEF enables Snort to generate IDMEF based messages and store them either in a flat file or distribute them via TCP sockets. This version is mainly a patch for the new Snort v2.8.3.2. See ChangeLog for details. Requirements: - Snort 2.8.3.2+ source http://www.snort.org - libidmef 1.0.2+ http://sourceforge.net/projects/libidmef - libxml2 http://xmlsoft.org/ - snort-idmef-plugin ;) http://sourceforge.net/projects/snort-idmef On the project's homepage you'll find some mailinglists for issues related to the snort-idmef-plugin. Feedback is always welcomed! Happy snort'ing, Sandro
Be the first person to add a text review.
Copyright © 2009 Geeknet, Inc. All rights reserved. Terms of Use
Thanks for your rating!
Would you also like to write a review?